If the article and other information is correct, they tried to breach a user named: ftp To me, it would make sense that that's not an actual person's usernam

If the article and other information is correct, they tried to breach a user named: ftp To me, it would make sense that that's not an actual person's username, and instead for it to be used for managerial duties (such as for an FTP server), and would likely have been accessed by more than one person. As such, it would make it an especially juicy target, because it would make the hacker a lot harder to trace, and would also not endanger any one person either. (It might make the IT department's life harder, but that's pretty much always the case in these scenarios.)